Browse Source
* fuzz: lay down the foundation for continuous fuzzing * improve the fuzzers and add some * fuzz: add Fuzzit badge to README & enable fuzzers submission in CI * v2-fuzz: do away with the submodule approach for fuzzers * fuzz: enable fuzzitmaster
Mohammed Al Sahaf
5 years ago
committed by
Matt Holt
9 changed files with 394 additions and 133 deletions
@ -0,0 +1,30 @@ |
|||||
|
// Copyright 2015 Matthew Holt and The Caddy Authors
|
||||
|
//
|
||||
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
|
// you may not use this file except in compliance with the License.
|
||||
|
// You may obtain a copy of the License at
|
||||
|
//
|
||||
|
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
//
|
||||
|
// Unless required by applicable law or agreed to in writing, software
|
||||
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
|
// See the License for the specific language governing permissions and
|
||||
|
// limitations under the License.
|
||||
|
|
||||
|
// +build gofuzz
|
||||
|
// +build gofuzz_libfuzzer
|
||||
|
|
||||
|
package caddy |
||||
|
|
||||
|
import ( |
||||
|
"bytes" |
||||
|
) |
||||
|
|
||||
|
func FuzzAdmin(data []byte) (score int) { |
||||
|
err := Load(bytes.NewReader(data)) |
||||
|
if err != nil { |
||||
|
return 0 |
||||
|
} |
||||
|
return 1 |
||||
|
} |
@ -0,0 +1,49 @@ |
|||||
|
// Copyright 2015 Matthew Holt and The Caddy Authors
|
||||
|
//
|
||||
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
|
// you may not use this file except in compliance with the License.
|
||||
|
// You may obtain a copy of the License at
|
||||
|
//
|
||||
|
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
//
|
||||
|
// Unless required by applicable law or agreed to in writing, software
|
||||
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
|
// See the License for the specific language governing permissions and
|
||||
|
// limitations under the License.
|
||||
|
|
||||
|
// +build gofuzz
|
||||
|
// +build gofuzz_libfuzzer
|
||||
|
|
||||
|
package httpcaddyfile |
||||
|
|
||||
|
import ( |
||||
|
"bytes" |
||||
|
|
||||
|
"github.com/caddyserver/caddy/v2" |
||||
|
"github.com/caddyserver/caddy/v2/caddyconfig/caddyfile" |
||||
|
) |
||||
|
|
||||
|
func FuzzHTTPCaddyfileAdapter(data []byte) int { |
||||
|
adapter := caddyfile.Adapter{ |
||||
|
ServerType: ServerType{}, |
||||
|
} |
||||
|
b, warns, err := adapter.Adapt(data, nil) |
||||
|
// Adapt func calls the Setup() func of the ServerType,
|
||||
|
// thus it's going across multiple layers, each can
|
||||
|
// return warnings or errors. Marking the presence of
|
||||
|
// errors or warnings as interesting in this case
|
||||
|
// could push the fuzzer towards a path where we only
|
||||
|
// catch errors. Let's push the fuzzer to where it passes
|
||||
|
// but breaks.
|
||||
|
if (err != nil) || (warns != nil && len(warns) > 0) { |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
// adapted Caddyfile should be parseable by the configuration loader in admin.go
|
||||
|
err = caddy.Load(bytes.NewReader(b)) |
||||
|
if err != nil { |
||||
|
return 0 |
||||
|
} |
||||
|
return 1 |
||||
|
} |
@ -0,0 +1,29 @@ |
|||||
|
// Copyright 2015 Matthew Holt and The Caddy Authors
|
||||
|
//
|
||||
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
|
// you may not use this file except in compliance with the License.
|
||||
|
// You may obtain a copy of the License at
|
||||
|
//
|
||||
|
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
//
|
||||
|
// Unless required by applicable law or agreed to in writing, software
|
||||
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
|
// See the License for the specific language governing permissions and
|
||||
|
// limitations under the License.
|
||||
|
|
||||
|
// +build gofuzz
|
||||
|
// +build gofuzz_libfuzzer
|
||||
|
|
||||
|
package httpcaddyfile |
||||
|
|
||||
|
func FuzzParseAddress(data []byte) int { |
||||
|
addr, err := ParseAddress(string(data)) |
||||
|
if err != nil { |
||||
|
if addr == (Address{}) { |
||||
|
return 1 |
||||
|
} |
||||
|
return 0 |
||||
|
} |
||||
|
return 1 |
||||
|
} |
@ -0,0 +1,26 @@ |
|||||
|
// Copyright 2015 Matthew Holt and The Caddy Authors
|
||||
|
//
|
||||
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
|
// you may not use this file except in compliance with the License.
|
||||
|
// You may obtain a copy of the License at
|
||||
|
//
|
||||
|
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
//
|
||||
|
// Unless required by applicable law or agreed to in writing, software
|
||||
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
|
// See the License for the specific language governing permissions and
|
||||
|
// limitations under the License.
|
||||
|
|
||||
|
// +build gofuzz
|
||||
|
// +build gofuzz_libfuzzer
|
||||
|
|
||||
|
package caddy |
||||
|
|
||||
|
func FuzzParseNetworkAddress(data []byte) int { |
||||
|
_, _, err := ParseNetworkAddress(string(data)) |
||||
|
if err != nil { |
||||
|
return 0 |
||||
|
} |
||||
|
return 1 |
||||
|
} |
@ -0,0 +1,26 @@ |
|||||
|
// Copyright 2015 Matthew Holt and The Caddy Authors
|
||||
|
//
|
||||
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
|
// you may not use this file except in compliance with the License.
|
||||
|
// You may obtain a copy of the License at
|
||||
|
//
|
||||
|
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
//
|
||||
|
// Unless required by applicable law or agreed to in writing, software
|
||||
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
|
// See the License for the specific language governing permissions and
|
||||
|
// limitations under the License.
|
||||
|
|
||||
|
// +build gofuzz
|
||||
|
// +build gofuzz_libfuzzer
|
||||
|
|
||||
|
package caddy |
||||
|
|
||||
|
func FuzzReplacer(data []byte) (score int) { |
||||
|
NewReplacer().ReplaceAll(string(data), "") |
||||
|
NewReplacer().ReplaceAll(NewReplacer().ReplaceAll(string(data), ""), "") |
||||
|
NewReplacer().ReplaceAll(NewReplacer().ReplaceAll(string(data), ""), NewReplacer().ReplaceAll(string(data), "")) |
||||
|
NewReplacer().ReplaceAll(string(data[:len(data)/2]), string(data[len(data)/2:])) |
||||
|
return 0 |
||||
|
} |
Loading…
Reference in new issue